Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/bd44afd5-ed0c-37a9-9748-f3ef709c9088.roa
File:                     bd44afd5-ed0c-37a9-9748-f3ef709c9088.roa (raw, json)
Hash identifier:          bEBn9H+5PxwD/8W2rXtNsbmJVQ+PT6PouHV54ydW+Bs=
Subject key identifier:   44:BC:3C:38:BD:6F:CF:8C:2F:49:70:8B:82:51:BA:8E:12:38:6F:CC
Certificate issuer:       /CN=d61cb32c-9cd6-4665-b0bd-25b06b7df110
Certificate serial:       010D0C9F43285847CFD4A9B4D792EF83D0819400
Authority key identifier: 4D:74:75:64:E5:D4:D8:70:B1:7E:AA:E9:45:31:A8:CC:2B:67:14:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/bd44afd5-ed0c-37a9-9748-f3ef709c9088.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     14618
IP address blocks:        2620:a1:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/d61cb32c-9cd6-4665-b0bd-25b06b7df110.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/d61cb32c-9cd6-4665-b0bd-25b06b7df110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a9:b4:d7:92:ef:83:d0:81:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d61cb32c-9cd6-4665-b0bd-25b06b7df110
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=605500ea-1afe-4ef1-a69d-94d5b349aebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:21:3e:98:49:18:3c:fa:ba:a3:48:47:65:f6:
                    03:9b:79:64:ff:32:de:1b:7d:ce:b4:5c:6b:05:ed:
                    cd:b6:43:47:8b:4a:38:e1:18:a2:84:c6:71:4e:7b:
                    63:2b:4e:81:79:44:12:47:ec:36:18:02:85:d7:8e:
                    8c:20:6e:bc:3c:6d:4f:b6:c0:17:ce:67:36:a0:4a:
                    b9:7d:3c:58:13:bd:2f:3d:f5:0d:03:c3:08:38:e4:
                    2c:5d:d7:7e:ae:4b:f4:45:a3:31:1f:39:31:9f:80:
                    a6:a2:36:d5:ab:fc:c1:19:6a:f7:9c:51:3e:f8:84:
                    bb:f8:03:31:19:e9:96:b4:a7:89:27:47:79:5f:ca:
                    02:fe:c7:e9:4e:de:49:0a:12:1b:1c:28:89:1c:05:
                    6e:e8:67:71:0f:12:60:db:b3:21:56:42:a7:5b:c3:
                    31:86:e1:ce:8c:1a:c3:ba:76:8e:c4:28:0e:ab:7e:
                    85:75:56:c8:f1:64:25:c8:7c:20:75:49:02:0e:1a:
                    82:be:ca:e6:ff:f2:96:64:88:83:d6:64:71:df:2e:
                    ac:37:ba:48:71:fa:2e:61:53:07:0c:26:a3:0c:38:
                    81:cb:fa:f9:2f:aa:25:7a:76:86:bc:75:c9:f8:66:
                    ee:f6:a3:5c:85:23:ff:7c:b4:e8:38:e7:66:8d:c7:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BC:3C:38:BD:6F:CF:8C:2F:49:70:8B:82:51:BA:8E:12:38:6F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/bd44afd5-ed0c-37a9-9748-f3ef709c9088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/d61cb32c-9cd6-4665-b0bd-25b06b7df110.crl

            X509v3 Authority Key Identifier:
                keyid:4D:74:75:64:E5:D4:D8:70:B1:7E:AA:E9:45:31:A8:CC:2B:67:14:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a1:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:af:34:61:e4:b0:f2:ba:65:ed:bc:9b:5a:40:50:50:13:89:
         64:94:56:c6:32:d3:03:90:0e:bb:17:be:0c:66:2f:09:49:2a:
         27:f9:70:da:2c:c6:36:0a:4f:0a:ac:ec:51:eb:45:1a:33:9c:
         28:f0:74:5a:1c:e1:c7:2e:1b:22:2e:c6:35:7d:c8:99:55:da:
         2a:4c:eb:ed:34:68:50:49:e6:b3:e6:77:8a:95:6b:65:fe:b9:
         01:26:6d:8c:0e:51:f3:d3:1c:fb:34:19:71:59:58:10:c1:f4:
         d2:4f:db:7f:2f:17:09:e6:cf:21:ef:74:91:c8:20:76:03:e5:
         ab:d6:cf:6a:37:af:87:a7:08:09:30:00:36:5f:d0:59:f3:11:
         da:e3:d8:82:1e:91:a8:b1:f5:90:58:38:83:86:0a:12:a9:b6:
         5b:22:94:6e:aa:a4:b0:e3:f1:da:ac:9f:6c:e1:b3:40:7f:1e:
         e2:20:92:42:b4:c6:64:87:1c:df:0c:7c:e9:ec:90:cb:50:27:
         4a:59:5b:7c:b9:d4:bd:78:6c:f8:8f:79:3c:3f:bf:e7:16:65:
         81:fb:3b:f8:b2:e1:e7:93:4e:a3:e9:5a:7d:0c:12:73:12:7b:
         48:63:f2:8d:40:46:1b:a4:16:85:3c:bb:32:3d:2e:72:90:7c:
         d9:73:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:59 2024 by rpki-client on console-fra.rpki-client.org